Privacy Policy — nd777

1. Introduction

This Privacy Policy ("Policy") sets out how nd777 ("nd777", "we", "us", "our") collects, uses, discloses and protects the personal data of individuals ("User", "you", "your") who access or use the nd777 online gaming platform at https://nd777.cam and any associated services (collectively, the "Platform").

nd777 is committed to handling personal data responsibly, transparently and in accordance with applicable data protection law. This Policy is incorporated by reference into nd777's Terms & Conditions, which govern the overall relationship between nd777 and its Users.

Pakistani users should be aware that data protection legislation in Pakistan, including the Personal Data Protection Bill (where enacted) and any applicable provincial regulations, may differ from international data protection frameworks. nd777 operates under the data protection framework applicable in its licensing jurisdiction. This Policy does not constitute legal advice and Users are encouraged to seek independent counsel regarding applicable local law.

2. Definitions

The following terms carry the meanings given below throughout this Policy:

• Personal Data: Any information relating to an identified or identifiable natural person, including name, email address, date of birth, CNIC number, financial account details and IP address.
• Processing: Any operation performed on personal data, including collection, recording, storage, alteration, retrieval, use, disclosure, erasure or destruction.
• Data Controller: nd777, which determines the purposes and means of processing your personal data.
• Data Processor: Any third party that processes personal data on behalf of nd777 under a written data processing agreement.
• Sensitive Data: A subset of personal data requiring heightened protection, including government-issued identity document numbers (CNIC/passport), financial details and, where applicable, information about health or wellbeing submitted in connection with responsible gambling requests.
• Cookies: Small text files placed on your device by the Platform to support session management, security and aggregate analytics.
• KYC: Know Your Customer — the identity, age and address verification process required before withdrawal of funds.

3. Data We Collect

nd777 collects the categories of personal data described in the table below. Data collected varies depending on your activity on the Platform and the stage of your account lifecycle.

4. How We Collect Data

nd777 collects personal data through the following channels:

4.1 Directly From You

Data provided directly when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact support, respond to surveys, submit a responsible gambling request or otherwise interact with the Platform.

4.2 Automatically Through Platform Use

Technical and usage data collected automatically through cookies, server logs, device fingerprinting tools and similar technologies when you access and navigate the Platform. This data is collected regardless of whether you are logged into an account.

4.3 From Third Parties

Identity verification and fraud screening data from accredited KYC/AML service providers. Payment transaction data from payment processors. Device reputation and risk-scoring data from fraud prevention partners. nd777 does not purchase marketing lists or receive personal data from social media platforms for advertising targeting purposes.

5. Legal Basis for Processing

nd777 processes your personal data only where a valid legal basis exists under applicable data protection law. The primary legal bases relied upon are:

• Contractual Necessity: Processing required to perform the contract between you and nd777 — including account management, payment processing, KYC verification and provision of gaming services.
• Legal Obligation: Processing required to comply with nd777's legal obligations, including AML legislation, licensing conditions, regulatory reporting and fraud investigation requirements.
• Legitimate Interests: Processing necessary for nd777's legitimate interests where those interests are not overridden by your rights — including platform security, fraud prevention, responsible gambling monitoring and aggregate analytics.
• Consent: Processing based on your freely given, specific and informed consent — primarily for non-essential cookies and, where required, for promotional communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Processing

nd777 uses the personal data it collects for the following specific purposes:

• Creating, managing and maintaining your nd777 account throughout its lifecycle.
• Verifying your identity and age as part of the KYC process and as required under AML obligations applicable to nd777's licensing jurisdiction.
• Processing PKR deposits and withdrawals and managing transaction records.
• Detecting, investigating and preventing fraud, money laundering, multi-accounting and other prohibited conduct as described in the Terms & Conditions.
• Monitoring gaming activity to fulfil nd777's responsible gambling obligations and to identify and act on early indicators of problem gambling behaviour.
• Providing customer support and resolving disputes, including maintaining records of support interactions.
• Sending account-related transactional communications such as deposit confirmations, withdrawal notifications and security alerts.
• Complying with requests from regulatory bodies, courts and law enforcement where legally required.
• Improving platform performance and user experience through aggregate, anonymised analytics.
• Enforcing nd777's Terms & Conditions and other published policies.

7. Data Sharing

nd777 does not sell, rent or trade your personal data to third parties for their own marketing or commercial purposes. Personal data is shared only in the following circumstances and only to the extent necessary:

7.1 Service Providers (Data Processors)

nd777 engages third-party service providers who process personal data on our behalf under written data processing agreements that bind them to confidentiality and security obligations no less protective than those applied by nd777. These include KYC/identity verification providers, payment processors, cloud hosting infrastructure providers, fraud detection services and customer support platforms.

7.2 Regulatory and Legal Obligations

nd777 may disclose personal data to its licensing regulator, financial intelligence units, law enforcement agencies or courts where required by law, court order or regulatory direction. nd777 will, where legally permissible, notify you of such a request before complying.

7.3 Business Transfers

In the event of a merger, acquisition, asset sale or corporate restructuring, personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments. nd777 will notify Users of any such transfer where required by applicable law.

7.4 Payment References

Where Users initiate transactions via familiar Pakistani payment methods — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah — transaction data necessary to process the payment is shared with the relevant payment processor. nd777 does not claim that any of these providers endorse or support gambling. Users must independently confirm that their chosen payment method permits gambling-related transactions under that provider's own terms.

8. International Transfers

nd777 operates under international licensing and may process or store personal data in jurisdictions outside Pakistan. Where personal data is transferred internationally, nd777 ensures that appropriate safeguards are in place, including contractual clauses that require receiving parties to protect your data to a standard equivalent to that applied by nd777.

Pakistani users should be aware that data protection standards vary across jurisdictions and that their data may be processed in countries whose laws differ from those of Pakistan. By using the Platform, you acknowledge and accept that such international transfers may occur as part of nd777's normal operational activities.

9. Data Retention

nd777 retains personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with legal, regulatory or contractual obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of the account relationship and for a minimum period after account closure as required by nd777's licensing obligations and AML legislation.
• KYC and Identity Documents: Retained for the period required by applicable AML and licensing regulations, typically a minimum of five years from the date of the last transaction or account closure, whichever is later.
• Financial Transaction Records: Retained for a minimum of five years to comply with AML and financial record-keeping obligations.
• Support Correspondence: Retained for a minimum of three years from the date of the interaction for dispute resolution and regulatory purposes.
• Technical and Usage Data: Retained in anonymised or aggregated form for platform analytics after the active retention period expires.
• Self-Exclusion Records: Retained for the full duration of the exclusion period and for a defined period thereafter to prevent re-registration in breach of the exclusion.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

10. Cookies & Tracking Technologies

nd777 uses cookies and similar browser-based technologies to support platform functionality, session security and aggregate analytics. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection cookies and load-balancing cookies. They cannot be disabled without preventing use of the Platform.
• Functional Cookies: Store your preferences such as language settings and layout choices to improve your experience across sessions. These do not track you across other websites.
• Analytics Cookies: Collect anonymised, aggregated data about how users navigate the Platform. This data is used solely to improve platform performance and user experience. nd777 does not share raw analytics data with advertising networks.

You can manage non-essential cookie preferences through your browser's settings. Disabling certain cookies may affect Platform functionality. nd777 does not use third-party advertising cookies or behavioural tracking pixels for retargeting campaigns.

11. Security Measures

nd777 implements a range of technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure or destruction:

• All data transmitted between your device and the nd777 Platform is encrypted using TLS (Transport Layer Security) protocols.
• KYC documents and sensitive identity data are processed and stored within a dedicated, access-controlled HTTPS-secured environment, separate from general Platform infrastructure.
• Access to personal data within nd777's systems is restricted on a strict need-to-know basis, with role-based access controls and multi-factor authentication for administrative access.
• Payment data is processed in accordance with applicable payment card industry security standards where relevant, and financial transaction data is not stored in plaintext.
• nd777 conducts regular security assessments and vulnerability testing of its Platform infrastructure.
• In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, nd777 will notify affected Users and relevant regulatory authorities as required by applicable law.

12. User Rights

Subject to applicable data protection law and any overriding legal obligations, you have the following rights in relation to your personal data held by nd777:

To exercise any of the above rights, contact nd777 at the email address provided in Section 16 of this Policy. nd777 will respond to all verified data subject requests within a reasonable timeframe. We may need to verify your identity before processing a request. Some rights may be limited where nd777 has overriding legal obligations — for example, AML legislation requires us to retain certain transaction and identity records regardless of a deletion request.

13. Children and Minors

nd777 is strictly an 18+ platform. We do not knowingly collect or process personal data from individuals under the age of 18 — or the higher minimum age required by the operator's licensing jurisdiction. Age verification is a mandatory step in the KYC process.

If nd777 discovers or has reason to believe that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. Any balance in an account found to belong to a minor will be handled in accordance with applicable regulatory guidance.

14. Third-Party Links

The nd777 Platform does not contain links to external third-party websites. This Policy applies solely to the nd777 Platform and services operated directly by nd777. If in future any third-party content or external references are introduced, those third parties operate under their own privacy policies for which nd777 accepts no responsibility.

15. Policy Changes

nd777 reserves the right to update or amend this Privacy Policy at any time. The revised Policy will be published on the Platform with an updated effective date. Where changes are material and adversely affect your rights, nd777 will endeavour to notify registered Users by email in advance of the changes taking effect, where reasonably practicable.

Continued use of the Platform after the effective date of any amended Policy constitutes your acceptance of those changes. It is your responsibility to review this Policy periodically to stay informed of how nd777 processes your personal data.

16. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to raise a concern about how nd777 processes your personal data, please contact our support team. All data-related requests should be submitted in writing so that nd777 can maintain an accurate record of your request and respond appropriately.

For responsible gambling support requests — including self-exclusion, deposit limits or loss limits — please visit the Responsible Gambling page or indicate "Responsible Gambling Request" in your support query for priority handling.

nd777's support team covers users across Pakistan, including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. All support communications are conducted in English. Urdu-language assistance may be available upon request — please indicate your preference when contacting support.